$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: PIivrne2svYCUN0SRwnFRUB0T/DIOT3OCkDZnQrSp4g= Subject key identifier: 7A:96:13:F4:DE:DA:34:32:F6:46:EA:91:13:A9:75:14:A7:B8:20:F6 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0AD1 Signing time: Sat 14 Jun 2025 19:21:05 +0000 Manifest this update: Sat 14 Jun 2025 19:21:04 +0000 Manifest next update: Sat 21 Jun 2025 19:21:04 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: 6bogC9hx14m8cXkz+VQAIlnyr70o7E2O4vil++Hb9cU=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: b6XLk77YmW0zXiOErVi5OmWJQw5FWv6IwcAZrV/V3KA=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: GniYTYc+rkB55fqBkTbtJuPpFjVN9/DglrpXWuCGSdc=) 4: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: DBysmfWMy9lYVGepCi0Ma5VGyIIRzRfP58+h2cMR+Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Jun 14 19:21:04 2025 GMT Not After : Jun 21 19:21:04 2025 GMT Subject: CN=684dcba1-9a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:c7:4f:fe:97:ab:72:03:36:83:03:61:1b: 8b:10:a5:27:05:81:53:a6:fc:a1:df:4b:8b:9b:b8: 30:8d:ac:e0:81:3c:60:fb:5d:d5:bc:32:54:64:16: ac:00:52:c3:d7:df:6b:7d:0d:4f:03:33:17:0c:33: 30:45:32:a8:36:53:82:f0:b5:58:32:a1:f1:80:ad: a0:56:12:40:04:f1:b6:dc:8d:1a:4e:c4:0c:89:99: 09:dd:f6:68:c6:94:d9:58:a3:fc:5f:85:ff:e6:a6: 3a:b3:0b:76:f3:eb:32:d7:62:cb:dc:ac:7d:16:94: 1e:7f:ce:80:4f:52:60:f6:46:50:1e:60:48:28:78: 4d:87:d0:0e:6b:0d:a9:0a:f3:39:3b:e4:f6:c2:64: 1b:ad:63:1b:b4:09:45:04:84:21:c3:71:b4:1b:46: ec:e8:59:d6:f7:1e:6d:f2:2b:9f:b3:6c:a1:69:82: 98:4b:61:9d:2a:03:1c:ee:11:f1:85:d3:0c:a3:06: bd:65:43:69:dc:00:18:20:07:20:2d:ce:a5:80:0d: 23:86:96:cd:ff:8b:fd:41:c1:38:af:d5:d2:2f:b3: 07:40:79:19:52:3c:71:55:99:6e:d7:33:89:1b:41: d0:2b:d1:ae:72:f1:3b:2b:fe:8a:39:80:c3:f6:76: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:13:F4:DE:DA:34:32:F6:46:EA:91:13:A9:75:14:A7:B8:20:F6 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:0e:11:cf:a9:cd:1b:36:28:2d:0f:bb:1c:15:17:56:50:45: 94:8b:78:93:e7:77:5b:98:50:39:78:01:19:88:10:7e:e8:b0: 4d:dc:f6:88:39:df:5a:1f:0b:ea:6e:a8:f9:94:03:17:44:43: b7:07:1e:c1:c3:96:a4:b3:ef:23:07:ba:14:d9:c5:85:5c:dd: a4:8e:6e:74:b5:34:19:14:bc:96:ba:2a:f2:56:69:fe:74:8a: c7:8b:d9:dc:b2:2e:6a:a1:d0:29:41:8e:8d:8d:f7:57:22:3e: f7:2b:ca:67:e3:49:74:d0:df:0e:08:8d:81:1a:17:c7:7d:d3: 45:3f:fe:62:30:74:00:fd:a6:49:89:76:bd:1f:c4:13:76:d1: 25:c6:0a:0d:83:6e:44:22:cf:ce:e7:56:5e:e1:c1:88:d7:0a: 0f:e1:2f:09:61:fc:7e:b6:17:8c:e0:93:a8:3d:4c:ed:21:8b: 25:b1:2f:74:87:80:33:94:0d:75:f6:cc:34:fa:83:25:e9:3d: a1:ce:9d:62:bb:1c:95:ab:62:04:34:f9:6f:12:f9:95:8c:57: 0c:94:98:6b:02:ad:46:62:e1:03:de:58:bf:94:53:ed:34:03: 57:0b:e3:37:8d:dc:dc:3c:39:80:7e:5f:fc:ad:31:f9:39:16: e6:3b:9b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjUwNjE0MTkyMTA0WhcNMjUwNjIxMTkyMTA0WjAYMRYwFAYD VQQDEw02ODRkY2JhMS05YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eHHT/6Xq3IDNoMDYRuLEKUnBYFTpvyh30uLm7gwjazggTxg+13VvDJUZBas AFLD199rfQ1PAzMXDDMwRTKoNlOC8LVYMqHxgK2gVhJABPG23I0aTsQMiZkJ3fZo xpTZWKP8X4X/5qY6swt28+sy12LL3Kx9FpQef86AT1Jg9kZQHmBIKHhNh9AOaw2p CvM5O+T2wmQbrWMbtAlFBIQhw3G0G0bs6FnW9x5t8iufs2yhaYKYS2GdKgMc7hHx hdMMowa9ZUNp3AAYIAcgLc6lgA0jhpbN/4v9QcE4r9XSL7MHQHkZUjxxVZlu1zOJ G0HQK9GucvE7K/6KOYDD9nZb9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqWE/Te 2jQy9kbqkROpdRSnuCD2MB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDiDhHPqc0bNigtD7scFRdWUEWUi3iT53dbmFA5eAEZiBB+6LBN3PaI Od9aHwvqbqj5lAMXREO3Bx7Bw5aks+8jB7oU2cWFXN2kjm50tTQZFLyWuiryVmn+ dIrHi9ncsi5qodApQY6NjfdXIj73K8pn40l00N8OCI2BGhfHfdNFP/5iMHQA/aZJ iXa9H8QTdtElxgoNg25EIs/O51Ze4cGI1woP4S8JYfx+theM4JOoPUztIYslsS90 h4AzlA119sw0+oMl6T2hzp1iuxyVq2IENPlvEvmVjFcMlJhrAq1GYuED3li/lFPt NANXC+M3jdzcPDmAfl/8rTH5ORbmO5ua -----END CERTIFICATE-----Generated at Sun Jun 15 10:07:55 2025 by rpki-client